(2013-06-21)
Associate SSIDs with VLANs
Define your vlans:
dot11 vlan-name CorporateLAN vlan 1
dot11 vlan-name GuestVLAN vlan 10
Define your SSIDs (authentication is left as an exercise for the reader):
dot11 ssid CORP
vlan 1
mbssid guest-mode dtim-period 75
!
dot11 ssid CORP-Guest
vlan 10
mbssid guest-mode dtim-period 75
Define your radio interface (and repeat as appropriate if you have more than one):
interface Dot11Radio0
ssid CORP
ssid CORP-Guest
mbssid
Define your sub-interface relationship to the VLAN and bridge groups:
interface Dot11Radio0.1
encapsulation dot1Q 1 native
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-floodinginterface Dot11Radio0.10
encapsulation dot1Q 10
bridge-group 10
bridge-group 10 subscriber-loop-control
bridge-group 10 spanning-disabled
bridge-group 10 block-unknown-source
no bridge-group 10 source-learning
no bridge-group 10 unicast-flooding
Define your ethernet interface and sub-interfaces for VLAN tagging and bridge group associations:
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learninginterface GigabitEthernet0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 spanning-disabled
no bridge-group 10 source-learning
As mentioned above, encryption and authentication are left as an exercise for the reader.